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1. ^ In an internetworked computer system comprising at least 
one user computer, at least one merchant computer, and a 
verification computer interconnected to a computer network, a 
method of approving an online transaction between the user 
computer and the merchant computer in conjunction with a 
"payment ^rdY ssociated with the user computer, con^rising the 



steps of: 




Nva) transmitting a transaction request from the user computer 
to the merchant computer; ] 

b) transmitting a verification request from the merchant 
computer to the verification computer, the verification 
request comprising a first data string associated with the 
payment card; p fU^^Wt^ 0x2.^ -1- ^X^S ib 

c) storing the verification r equest at the verification 
computer in association w ith a transaction identifier and a 
verifi cati on data strincf; ^-rog£, 

d) transmitting the transaction identifier and the CUJUCM^ 



verification data string from the verification computer to the 
merchant computer; ^ (Vnv^T^^ ^"'^^jTl 

e) storing at the merchant computer (i) the verif ication 
data string as ^^ xpecte d verification data string y* and (ii) 
the transaction identifier; ^=5TC?ft£L 

f) transmitting from the merchant computer to the user J 
computer the transaction identifier; ^ 
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g) the user computer transmitting to the verification 
computer (i) the transaction identifier, and (ii) a second 
data string associated with the payment card; /T^ 

h) the verification computer using the transaction 
identifier received from the user computer to retrieve the 
verification request previously stored by the verification 
computer with that received transaction identifier; 

i) the verification computer^^p^f orming a verification step 
by using the first data string associated with the payment 
card retrieved from storage and the second data string AC"!^ 
associated with the payment card received from th^ us er 
computer to verify if the transaction should be approved; 

j) upon successful verification that the transaction should 
be approved, the verification computer transmitting a 
verification approval message to the user computer, the 
verification approval message comprising the transaction 
identifier and the verification data string associated 
therewith as a confirmation verification data string; Q 

Jc) the user computer transmitting the verification approval 
message to the merchant computer; ^ 

1) the merchant computer using the transaction identifier in 
the verification approval message to retrieve an expected 
verification data string previously stored; 

m) the merchant computer comparing the expected verification 
data string with the confirmation verification data string 
from the verification approval message; and 
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n) the merchant computer indicating that the transaction has 
been approved if the /^comparisorT j^^ ^ ^ ^ 

2. The method of claim 1 wherein the verification request 
transmitted from the merchant computer to the verification 
computer further comprises an indication of a payment amount 
associated. with the transaction request. 

3. The method of claim 2 wherein the verification step 
performed by the verification computer determines if an 
account associated with the payment card. is sufficient to 
cover the payment amount in the verification request. 

4. The method of claim 3 wherein the transaction request 
comprises information associated with a product to be 
purchased by the user computer and the payment amount 
associated with the product. 

5. The method of claim 4 wherein the payment card is a xlebit ^ 
card. 

6. The method of claim 5 wherein the /first data string is an l*^:^^^)!' ^ 
account number associated with the debit card, and wherein the 

second data string is a /PIN associated with the debit card. 

L - ■ ■ ' 

7. The method of claim 4 wherein the payment card is a ef^^*^ 

_- ■ - - ■" «^ 
credit card. 

8. The method of claim 7 wherein the first data string is an ' 
account number associated with the credit card. 



9. The method of claim 8 wherein the second data string is 
ah expiration date associated with the credit card. 



7- 
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10. The method of claim 8 wherein the second data string is a 
CVV2 number associated with the credit card. 

11. The method of claim 1 wherein the verification request 
transmitted from the merchant computer to the verification 
computer further comprises a merchant identifier. 

12. The method of claim 1 wherein the'l:ransaction identifier 
\is generated by the verification computer. 

13. The method of claim 1 wherein the fverif ication data 
string is generated by the verification computer. 

14. The method of claim 1 wherein the user computer is 
executing afweb browser program, and wherein /the user computer 
is caused ^to transmit to the verification computer (i) the 
transaction identifier, and (ii) a second data string 
associated with the payment card, by a redirect command sent^ 
from the merchant computer to the user computer. 

15. The method of claim 1 wherein the user computer is 
executing a web browser program, and wherein the user computer 
is caused /to transmit the verification approval message to the 
merchant computer by a redirect command sent from the 
verification computer to the user computer. 

16. The method of claim 1 wherein the step of the user 
computer transmitting to the verification computer (i) the 
transaction identifier, and (ii) a second data string 
associated with the payment card, comprises the steps of: 

the user computer transmitting the transaction identifier 
to the verification computer; 
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the verification computer requesting the user computer to 
transmit the second data string to the verification computer; 
and 

the user computer transmitting the second data string to 
the verification computer in response thereto. 

17. The method of claim 16 wherein the verification computer 
requests the user computer to transmit the second data string 
to the verification computer by sending a form to a browser 
program executing on the user computer, the form comprising a 

'data entry field used by an operator of the user computer to 
■enter the requested second data string. 

18. The method of claim 3 wherein the step of determining if 
an account associated with the payment card is sufficient to 
cover the payment amount in the verification request comprises 
the step of the ;vefification computer communicating with a 
gateway computer associated with an existing credit approval 

^system. 

19. The method of claim 1 wherein the first data string ' \Dbt^ 
associated with the payment card /is obtained by the merchant 

rcomputer as part of the transaction request transmitted by the 
user computer. 

20. The method of claim 1 wherein the first" data string 
associated with the payment card; is obtained by the merchant 
computer by retrieval from storage. 

21. I A system for approving an online transaction comprising: 
/ a) a user computer; 

I b) a merchant computer; and 
I c) a verification computer; 
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< said user computer, said merchant computer, and said 
verification computer are interconnected to a computer 
network; 



conjunction with a payment card associated with said user 
computer; and further wherein: 

a) said user computer is programmed to transmit a 
transaction request to the merchant computer; 

b) said merchant computer is programmed to transmit a 
verification request to the verification computer, the 
verification request comprising a first data string associated 
with the payment card^ 

c) said verification computer is programmed to (i) store the 
verification request in association with a transaction 
identifier and a verification data string, and (ii) transmit 
the transaction identifier and the verification data string to 
the merchant computer; 

d) said merchant computer is further programmed to store (i) 
the verification data string as an expected verification data 
string, and (ii) the transaction identifier, and to transmit 
to the user computer the transaction identifier; 

e) said user computer user computer is further programmed to 
transmit to the verification computer (i) the transaction 
identifier, and (ii) a second data string associated with the 
payment card; 



f) said verification computer is further programmed to (i) 
use the transaction identifier received from the user computer 



I wherein said online transaction is executed in 
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to retrieve the verification request previously stored with 
that received transaction identifier, to^ii) perform a 
verification step by using the first data string associated 
with the payment card retrieved from storage and the second 
5 data string associated with the payment card received from the 

user computer to verify if the transaction should be approved, 

i) transmit, upon successful verification that the 
transaction should be approved, a verification approval 
message to the user computer, the verification approval 
10 message comprising the transaction identifier and the 

verification data string associated therewith as a 
confirmation verification data string; 



q) said user computer is further programmed to transmit the 
verification approval message to the merchant computer; 



=^ h) said merchant computer is further programmed to (i) use 

•SST 

W the transaction identifier in the verification approval 

Y "^message to retrieve an expected verification data string 

\o ... 

20''\\^ previously stored, to (ii) compare the expected verification 

nJ ft 

|=i ^ data string with the confirmation verification data string , 

from the verification approval message, and to (iii) indicate 
O that the transaction has been approved if the comparison is 



25 

2^' 



positive. 

22. The system of claim 21 wherein the verification request 
transmitted from the merchant computer to the verification 
computer further comprises an indication of a payment amount 
associated with the transaction request. 

— 23. The system of claim 22 wherein the verification computer 
is programmed to perform the verification step by determining 



30 



27 



Docket No.: 700-198RP 



if an account associated with the payment card is sufficient 
to cover the payment amount in the verification request. 

24. The system of claim 23 wherein the transaction request 
comprises information associated with a product to be 
purchased by the user computer and the payment amount 
associated with the product. 

25. The system of claim 24 wherein the payment card is a 
debit card. 

26. The system of claim 25 wherein the first data string is 
an account number associated with the debit card, and wherein 
the second data string is a PIN associated with the debit 
card. 

27. The system of claim 24 wherein the payment card is a 
credit card. 

28. The system of claim 27 wherein the first data string is 
an account number associated with the credit card. 

29. The system of claim 28 wherein the second data string is 
an expiration date associated with the credit card. 

30. The system of claim 28 wherein the second data string is 
a CW2 number associated with the credit card. 

31. The system of claim 21 wherein the verification request 
transmitted from the merchant computer to the verification 
computer further comprises a merchant identifier. 
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32. The system of claim 21 wherein the verification computer 
is programmed to generate the transaction identifier, 

33. The system of claim 21 wherein the verification computer 
is programmed to generate the verification data string. 

34. The system of claim 21 wherein the user computer is 
further programmed to execute a web browser program, and 
wherein the user computer is caused to transmit to the 
verification computer (i) the transaction identifier, and (ii) 
a second data string associated with the payment card, by a 
redirect command sent from the merchant computer to the user 
computer* 

35. The system of claim 21 wherein the user computer is 
further programmed to execute a web browser program, and 
wherein the user computer is caused to transmit the 
verification approval message to the merchant computer by a 
redirect command sent from the verification computer to the 
user computer. 

36. The system of claim 21 wherein the user computer is 
programmed to transmit to the verification computer (i) the 
transaction identifier, and (ii) a second data string 
associated with the payment card, by a process executing the 
steps of comprises the steps of: 

the user computer transmitting the transaction identifier 
to the verification compiater; 

the verification computer requesting the user computer to 
transmit the second data string to the verification ComputerL- 
and 

the user computer transmitting the second data string to 
the verification computer in response thereto. 
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37. The system of claim 36 wherein the verification computer 
requests the user computer to transmit the second data string 
to the verification computer by sending a form to a browser 
program executing on the user computer, the form comprising a 
data entry field used by an operator of the user computer to 
enter the requested second data string. 

38. The system of claim 23 wherein the step of determining if 
an account associated with the payment card is sufficient to 
cover the payment amount in the verification request comprises 
the step of the verification computer communicating with a 
gateway computer associated with an existing credit approval 
system. 

39. The system of claim 21 wherein the first data string 
associated with the payment card is obtained by the merchant 
computer as part of the transaction request transmitted by the 
user computer. 

40. The system of claim 21 wherein the first data string 
associated with the payment card is obtained by the merchant 
computer by retrieval from storage. 
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41. A method of a merchant computer obtaining approval from a 
verification computer of an online transaction requested by a 
user computer in conjunction with a payment card associated 
5 with the user computer, comprising the steps of: 

^ ^ a) on receipt of a transaction request, the merchant 
computer transmitting a verification request to the 
verification computer, the verification request comprising a 
first data string associated with the payment card; 

10 

\ b) storing the verification request at the verification 

computer in association with a transaction identifier and a 
verification data string; 

D 

"S^ transmitting the transaction identifier and the 

verification data string from the verification computer to the 



m 



merchant computer; 



d) storing at the merchant computer (i) the verification 
rto data string as an expected verification data string, and (ii) 



the transaction identifier; 



3 ^^"^ 



e) transmitting the transaction identifier from the merchant 



computer to the verification computer via the user computer; 
25 

f ) the verification computer obtaining from the user 
\ lP computer a second data string associated with the payment 
card; 

30 \ -g) the verification computer using the transaction 

nl identifier received from the merchant computer via the user 
computer to retrieve the verification request previously 
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stored by the verification computer with that received 
transaction identifier; 

h) the verification computer performing a verification step 
5 by using the first data string associated with the payment 

card retrieved from storage and the second data string 
associated with the payment card received from the user 
computer to verify if the transaction should be approved; 

10 i) upon successful verification that the transaction should 

•'N ^ be approved, the verification computer transmitting a 
\ verification approval message to the merchant computer via the 

user computer, the verification approval message comprising 
O the transaction identifier and the verification data string 

J$ associated therewith as a confirmation verification data 

yj string; 



\ ' j) the merchant computer using the transaction identifier in 
the verification approval message to retrieve an expected 
1^ verification data string previously stored; 



k) the merchant computer comparing the expected verification 
data string with the confirmation verification data string 
from the verification approval message; and 



25 



1) the merchant computer indicating that the transaction has 

^ ^ .... 
\) been approved if the comparison is positive. 



42, The method of claim 41 wherein the verification request 
30 ^ transmitted from the merchant computer to the verification 

computer further comprises an indication of a payment amount 
associated with the transaction request. 
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43. The method of claim 42 wherein the verification step 
performed by the verification computer determines if an 
account associated with the payment card is sufficient to 
cover the payment amount in the verification request. 

44. The method of claim 43 wherein the transaction request 
comprises information associated with a product to be 
purchased by the user computer and the payment amount 
associated with the product. 

45- The method of claim 44 wherein the payment card is a 
debit card. 

46- The method of claim 45 wherein the first data string is 
an account number associated with the debit card, and wherein 
the second data string is a PIN associated with the debit 
card. 

47. The method of claim 4 4 wherein the payment card is a 
credit card. 

48- The method of claim 47 wherein the first -data string is 
an account number associated with the credit card. 

49. The method of claim 48 wherein the second data string is 
an expiration date associated with the credit card. 

50. The method of claim 48 wherein the second data string is 
a CW2 number associated with the credit card. 

51- The method of claim 41 wherein the verification request 
transmitted from the merchant computer to the verification 
computer further comprises a merchant identifier. 
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52. The method of claim 41 wherein the transaction identifier 
is generated by the verification computer. 

53. The method of claim 41 wherein the verification data 
string is generated by the verification computer. 

54. The method of claim 41 wherein transaction identifier is 
transmitted from the merchant computer to the verification 
computer via the user computer by the merchant computer 
issuing a redirect command to the user computer. 

55. The method of claim 41 wherein the verification approval 
message is transmitted from the verification computer to the 
merchant computer via the user computer by the verification 
computer issuing a redirect command to the user computer. 

56. The method of claim 41 wherein the verification computer 
obtains the second data string associated with the payment 
card by a request issued to the user computer. 

57. The method of claim 56 wherein the verification computer 
requests the user computer to transmit the second data string 
to the verification computer by sending a form to a browser 
program executing on the user computer, the form comprising a 
data entry field used by an operator of the user computer to 
enter the requested second data string. 

58- The method of claim 4 3 wherein the step of determining if 
an account associated with the payment card is sufficient to 
cover the payment amount in the verification request comprises 
the step of the verification computer communicating with a 
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gateway computer associated with an existing credit approval 
system. 

59. The method of claim 41 wherein the first data string 
associated with the payment card is obtained by the merchant 
computer as part of the transaction request. 

60. The method of claim 41 wherein the first data string 
associated with the payment card is obtained by the merchant 
computer by retrieval from storage, 

S^ydoTw^-- fn^Lcetto^ a^L^u^^tJEx. ^"^^ 

61. ^ A system for approving an online transaction comprising: 
\ a) a merchant computer; and 
\ b) a verification computer; 

^ said merchant computer and said verification computer are 
interconnected to a computer network; 

\ wherein said online transaction is executed in 
conjunction with a payment card; and further wherein: 

^a) said merchant computer is programmed to receive a 
transaction request and in response thereto transmit a 
verification request to the verification computer, the 
verification request comprising a first data string associated 
with the payment card; 

-.1) 

oy said verification computer is programmed to (i) store the 

verification request in association with a transaction 
identifier and a verification data string, and (ii) transmit 
the transaction identifier and the verification data string to 
the merchant computer; 

c) said merchant computer is further programmed to store (i) 
the verification data string as an expected verification data 
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string, and (ii) the transaction identifier, and to transmit 
(^2^3/^ transaction identifier to the verification computer via 

\^ the user computer; 

5 d) said verification computer is further programmed to (i) 

use the transaction identifier received from the merchant 
^(^omputer via user computer to retrieve the verification 



1 



*^ request previously stored with that received transaction 

identifier, (iiO'obtain a second data string associated with 
the payment card from a user con iPLUter (iii) perform a 
verification step by using the first data string associated 
with the payment card retrieved from storage and the second 
data string associated with the payment card received from the 
user computer to verify if the transaction should be approved, 
to (iv) transmit, upon successful verification that the 
transaction should be approved, a verification approval 
message to the merchant computer via the user computer, the 
verification approval message comprising the transaction 
identifier and the verification data string associated 
therewith as a confirmation verification data string; 



y said merchant computer is further programmed to (i) use 
yj^ the transaction identifier in the verification approval 
message to retrieve an expected verification data string 
5 previously stored, to (ii) compare the expected verification 

data string with the confirmation verification data string 
from the verification approval message, and to (iii) indicate 
that the transaction has been approved if the comparison is 
positive . 




0 



62. The system of claim 61 wherein the verification request 
transmitted from the merchant computer to the verification 
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computer further comprises an indication of a payment amount 
associated with the transaction request. 

63. The. system of claim 62 wherein the verification computer 
is programmed to perform the verification . step by determining 
if an account associated with the payment card is sufficient 
to cover the payment amount in the verification request. 

64. The system of claim 63 wherein the transaction request 
comprises information associated with a product to be 
purchased by the user computer and the payment amount 
associated with the product. 

65. The system of claim 54 wherein the payment card is a 
debit card. 

66. The system of claim 65 wherein the first data string is 
an account number associated with the debit card, and wherein 
the second data string is a PIN associated with the debit 
card. 

67. The system of claim 64 wherein the payment card is a 
credit card. 

68. The system of claim 67 wherein the first data string is 
an account number associated with the credit card. 

69. The system of claim 68 wherein the second data string is 
an expiration date associated with the credit card. 

70. The system of claim 68 wherein the second data string is 
a CVV2 number associated with the credit card. 
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71. The system of claim 61 wherein the verification request 
transmitted from the merchant computer to the verification 
computer further comprises a merchant identifier. 



5 ^ 72. The system of claim 61 wherein the verification computer 
^ is programmed to generate the transaction identifier. 



73. The system of claim 61 wherein the verification computer 
is programmed to generate the verification data string. 



10 



74. The system of claim 61 wherein the merchant computer is 



^A 



SB 



programmed to transmit the transaction identifier to the ^ 
verification computer via the user computer by issuing a ^ 
redirect command to the user computer. 



U /\/ 75, The system of claim 61 wherein the verification computer 
- — is programmed to transmit the verification approval message to 

a the merchant computer via the user computer by issuing a 

n 

redirect command to the user computer. 



bo 

fU 



76. The system of claim 61 wherein the verification computer 
is programmed to obtain* the second data string associated with 
the payment card by a request issued to the user computer. 



25 77. The system of claim 76 wherein the verification computer 

requests the user computer to transmit the second data string 
to the verification computer by sending a form to a browser 
program executing on the user computer, the form comprising a 
data entry field used by an operator of the user computer to 
30 enter the requested second data string. 



78. The system of claim 63 wherein the step of determining if 
an account associated with the payment card is sufficient to 
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cover the payment amount in the verification request comprises 
the step of the verification computer communicating with a 
gateway computer associated with an existing credit approval 
system. 

79. The system of claim 61 wherein the first data string 
associated with the payment card is obtained by the merchant 
computer as part of the transaction request transmitted by the 
user computer. 



10 



80. The system of claim 61 wherein the first data string 
yT associated with the payment card is obtained by the merchant 



^ computer by retrieval from storage. 



1^5 ^81. In an internetworked computer system comprising at least 

bj one user computer^ at least one merchant computer, and a 

2, verification computer interconnected to a computer network, a 

m method of the verification computer approving an online 

^ transaction between the user computer and the merchant 

SO computer in ^conjunction with a payment card associated with 

|T the user computer, comprising the steps of: 

Q receiving a verification request from a merchant ^ 

computer, the verification request comprising a first data 

25 string associated with the payment card; 

. ^ ^ b) storing the verification request in association with a 
transaction identifier and a verification data string; 

30 ^ c) transmitting the transaction identifier and the 
^ verification data string to the merchant computer; 
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^ ^ d) receiving from the user computer (i) the transaction. 

identifier, and (ii) a second data string associated with the ^ ^ 

payment card; ^^^^S^u) (Sj^,^ OC "^^^^ 

5 ^ e) using the transaction identifier received from the user 
\ computer to retrieve the verification request previously 
stored with that received transaction identifier; 

f) performing a verification step by using the first data 
10 string associated with the payment card retrieved from storage 

and the second data string associated with the payment card 
received from the user computer to verify if the transaction 
should be approved; and f^^-ib '>A^5*S"T2> • 

^5 \ g) upon successful verification that the transaction should 
be approved, transmitting av erif ication approval message to 
the user computer, the verification approval message 
comprising the transaction identifier and the verification 
data string associated therewith as a confirmation 
'JO verification data string. ^TW^^ KmT^ 




o 



25 request 



82. The method of claim 81 wherein the verification request 
received by the verification computer further comprises an 
indication of a payment amount associated with the transaction 



83. The method of claim 82 wherein the verification step . 

determines if an account associated with the payment card is 
^ ^ sufficient to cover the payment amount in the verification 
30 request. 




84. The method of claim 81 wherein the payment card is a 
debit card. 
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85. The method of claim 84 wherein the first data string is 
an account number associated with the debit card, and wherein 
the second data string is a PIN associated with the debit 
card. 

86. The method of claim 81 wherein the payment card is a 
credit card. 

87. The method of claim 86 wherein the first data string is 
an account number associated with the credit card. 

88. The method of claim 87 wherein the second data string is 
an expiration date associated with the credit card.. 

89. The method of claim 87 wherein the second data string is 
a CW2 number associated with the credit card. 

90. The method of claim 81 wherein the verification request 
received by the verification computer further comprises a 
merchant identifier . 

91. The method of claim 81 wherein the transaction identifier 
is generated by the verification computer. 

92. The method of claim 81 wherein the verification data 
string is generated by the verification computer. 

93. The method of claim 81 wherein the step of receiving from 
the user computer (i) the transaction identifier, and (ii) a 
second data string associated with the payment card comprises: 

the verification computer receiving the transaction 
identifier from the user computer; 
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the verification computer requesting the user computer to 
transmit the second data string to the verification computer; 
and 

the verification computer receiving the second data 
string from the user computer in response thereto . 

94. The method of claim 93 wherein the verification computer 
requests the user computer to transmit the second data string 
to the verification computer by sending a form to a browser 
program executing on the user computer, the form comprising a 
data entry field used by an operator of the user computer to 
enter the requested second data string. 

95. The method of claim 83 wherein the step of determining if 
an account associated with the payment card is sufficient to 
cover the payment amount in the verification request comprises 
the step of communicating with a gateway computer associated 
with an existing credit approval system. 



96. \ A verification computer for approving an online 
transaction between a user computer and a merchant computer, 
comprising: 

means for communicating with each of the user 
computer and the merchant computer over a computer network; 
processing means programmed to: 

a) receive a verification request from a 




merchant computer, the verification request 
comprising a first data string associated with the 
payment card; 




b) store the verification request in 



association with a transaction identifier and a 



verification data string; 
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^c) transmit the transaction identifier and 
the verification data string to the merchant 
computer; 1 ^ , (L^vJU^t . 

ato^ u^<^ p^J <J_ 

\ ^/ d) receive from the user computer (i) the 

transaction identifier, and (ii) a second data 
string associated with the payment card; 

\j e) use the transaction identifier received 
from the user computer to retrieve the verification 
request previously stored with that received 
transaction identifier; 



f) perform a verification step by using the 
first data string associated with thi payment card 
retrieved from storage and the second data string 
associated with the payment card received from the 
user computer to verify if the transaction should be 
approved; and 

\ g) upon successful verification that the 

y j) transaction should be approved, transmit a 

verification approval message to the user computer, 
the verification approval message comprising the 
transaction identifier and the verification data 
string associated therewith as a confirmation - *^ 
verification data string. 

97. The verification computer of claim 96 wherein the 
processing means is further programmed to utilize an 
indication of a payment amount associated with a transaction 
request • 





Docket No. : 700-198RP 



98. The verification computer of claim 97 wherein the 
processing means is further programmed to determine if an 
account associated with the payment card is sufficient to 
cover the payment amount in the verification request. 

99. The verification computer of claim 96 wherein the 
processing means is further programmed to receive the 
transaction identifier from the user computer; to request the 
user computer to transmit the second data string to the. 
verification computer; and to receive the second data string 
from the user computer in response thereto. 

100. The verification computer of claim 99 wherein the 
processing means is further programmed to request the user 
computer to transmit the second data string to the 
verification computer by sending a form to a browser program 
executing on the user computer, the form comprising a data 
entry field used by an operator of the user computer to enter 
the requested second data string. 

101. The verification computer of claim 98 wherein the 
processing means is further programmed to determine if an 
account associated with the payment card is sufficient to 
cover the payment amount in the verification request by 
communicating with a gateway computer associated with an 
existing credit approval system. 

102. In an internetworked computer system comprising at least 
one user computer, at least one merchant computer, and a 
verification computer interconnected to a computer network, a 
method of the merchant computer obtaining approval for an 
online transaction between the user computer and the merchant 
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computer in conjunction with a payment card associated with 
the user computer, comprising the steps of: 

\cX^ a) receiving a transaction request from the user computer; 

5 



b) transmitting a verification request to the verification 
computer, the verification request comprising a first data 
string associated with the payment card; 



10 , ^ c) receiving from the verification computer a transaction 



identifier and a verification data string; 



\ 



^ d) storing (i) the verification data string as an expected 
verification data string, and (ii) the transaction identifier; 
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y e) transmitting to the verific 

^ ^ computer the transaction identij 



.cation computer via the user 
computer the transaction identifier; 



I J f) receiving from the verification computer via the user 

'iK) computer a verification approval message, the verification 

^ approval message comprising the transaction identifier and a 

^ verification data string associated therewith as a 
Q 

Q ^ confirmation verification data string; 




25 \ using the transaction identifier in the verification 

approval message to retrieve an expected verification data 
string previously stored; 



h) comparing the expected verification data string with the 
confirmation verification data string from the verification 
approval message; and 
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i) indicating that the transaction has been approved if the 
comparison is positive. 

103. The method of claim 102 wherein the verification request 
transmitted to the verification computer further comprises an 
indication of a payment amount associated with the transaction 
request . 

104. The method of claim 103 wherein the transaction request 
comprises information associated with a product to be 
purchased by the user computer and the payment amount 
associated with the product. 

105. The method of claim 102 wherein the verification request 
transmitted from the merchant computer to the verification 
computer further comprises a merchant identifier. 

106. iThe^ method of claim 102 wherein the transaction 
ident-ifiFer is geiierated by the verification computer. 

107.|The method of claim 102 wherein mj 
string is generated by the 



^ixie iiieuiiuu uj- ^jxcixiu 102 wherein vei3a^ca1^An>data 
is generated by th4 verijficatiom compute'r . \| 

108. The metftod of claim %02 wherein the^step of transmitting 
to the verification computer vika ^e usl^^Gdrapi5^^^ . the 



transaction identifier comprises sending a redirect command to 
the user computer! 



109. The methbd^^of claim /102 wherein the^ f irst data string 
associated^ith |he payment card is^.ob,tainea by the merchant 
computer as^^t of . the .transactio^Qequest transmitted by the 
user computer. \^ ^ 
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110. The method of claim 102 wherein the first data string 
associated with the payment card is obtained by the merchant 
computer by retrieval from storage. 

111. A merchant computer for executing an online transaction 
with a user computer on approval by a verification computer, 
comprising: 



computer and the verification computer over a computer 
network; 



means for communicating with each of the user 




processing means programmed to: 

\ a) receive a transaction request from the 



user computer; 




^ b) transmit a verification request to the 
verification computer, the verification request 
comprising a first data string associated with the 
payment card; 




c) receive from the verification computer a 
transaction identifier and a verification data 



string; 




r\ d) store (i) the verification data string as 
Jn expected verification data string, and (ii) the 
transaction identifier; 




] I e) transmit to the verification computer via 
the user computer the transaction identifier; 




f) receive from the verification computer via 
the user computer a verification approval message, 
the verification approval message comprising the 
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transaction identifier and a verification data 



str ing associat ed therewith as a confirmation 
verification data string; 

g) use the transaction identifier in the 
verification approval message to retrieve an 
expected verification data string previously stored; 

^ h) comparing the expected verification data 

string with the confirmation verification data 
string from the verification approval message; and 



i) indicating that the transaction has been 
approved if the comparison is positive. 



112. The merchant computer of claim 111 wherein the processing 
means is further programmed to include in the verification 
request transmitted to the verification computer an indication 
of a payment amount associated with the transaction request. 



113. The merchant computer of claim 111 wherein the processing 
means is further programmed to transmitting to the 
verification computer via the user computer the transaction 
identifier by sending a redirect command to the user computer. 
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